YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 18 · 4 min readFAM CTF : The Vault Door WriteupSummary NexaVault is a mock internal dashboard app that gates an "Admin Vault" panel behind a role claim in a JWT. The app issues a user-role token on login, stored in the nx_access cookie, and trusts00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 17 · 4 min readHackTheBox : WayWitch WriteupSummary The ticket portal generates guest session JWTs client-side, signing them with an HMAC secret (halloween-secret) that's hardcoded directly in the page's JavaScript. Since the server verifies to00
AAArish Ahmadinblog.arishahmad.in·Sep 1, 2024 · 9 min readUnderstanding JWTs: The Key to Secure User AuthenticationWhat is JWT? JWT stands for JSON Web Token. It’s a compact, URL-safe token format used to securely transmit information between parties as a JSON object. How Does JWT Work? Think of a JWT as a sealed envelope. This envelope contains some information ...00
ABAARYAN BAJAJinaaryan-bajaj-learnings.hashnode.dev·May 24, 2024 · 3 min readUnderstanding JWT Authentication: A Real-Life AnalogyIntroduction In the ever-evolving landscape of web development, ensuring secure communication between client and server is paramount. One of the most popular methods for achieving this is JWT (JSON Web Token) authentication. But what exactly is JW...00
